一种基于成本的入侵检测系统评估决策树分析方法

A Decision Tree Analytical Method Based on Cost for IDS Evaluation

随着入侵检测系统的广泛应用,对入侵检测系统进行评估的要求也越来越迫切。本文首先对入侵检测评估的现状进行了深入的总结研究,然后在已有方法的基础上,提出了基于成本的基于成本的入侵检测系统评估决策树分析方法。该方法也是基于ROC曲线的,它通过决策树引入成本,利用最优预计成本表征入侵检测系统性能。最后通过实验表明了该方法的有效性。

With the broad application of intrusion detection systems （IDSs）, it＇s more and more urgent to evaluate these IDSs. First, this paper summarizes the status of IDSs evaluation. Then based on existed methods, we bring forward an analytical method on performance., the decision tree analytical method based on cost for IDSs evaluation. This method based on ROC curve, but introduces cost by decision tree. Then it scales the performance of IDSs with corresponding cost. At last, we make a experiment to prove the validity of this method.